CyberICT

CVE-2026-70213

Microsoft · Published October 13, 2026

CVSS v3.1

HIGH
Patch availableGet patch

Description

Microsoft Power Apps Remote Code Execution Vulnerability. Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network.

Affected Products

  • Microsoft Power Apps for Android
  • Microsoft Power Apps

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C